专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20190342093A1 CONVERGED CRYPTOGRAPHIC ENGINE 审中-公开
公开(公告)号：US20190342093A1
公开(公告)日：2019-11-07
申请号：US16457909
申请日：2019-06-28
申请人： Siddhartha Chhabra , Prashant Dewan
发明人： Siddhartha Chhabra , Prashant Dewan
IPC分类号： H04L9/08 , G06F21/60
摘要： An apparatus of a computing system, a computer-readable medium, a method and a system. The apparatus comprises one or more processors that are to communicate with a computing engine of the computing system and to: receive an instruction including information on a cryptographic key; determine whether a no-decrypt mode is to be active or inactive with respect to a read request from the computing engine; when receiving the read request to read content from a memory, and in response to a determination that the no-decrypt mode is inactive, decrypt the content using the key to generate a decrypted content and send the decrypted content to the computing engine; and in response to receiving the read request, and in response to a determination that the no-decrypt mode is active, send the content to the computing engine without decrypting the content.

2. 发明申请

US20190044977A1 TECHNIQUES TO ENFORCE POLICIES FOR COMPUTING PLATFORM RESOURCES 审中-公开
公开(公告)号：US20190044977A1
公开(公告)日：2019-02-07
申请号：US16143639
申请日：2018-09-27
申请人： SIDDHARTHA CHHABRA , PRASHANT DEWAN
发明人： SIDDHARTHA CHHABRA , PRASHANT DEWAN
IPC分类号： H04L29/06 , G06F21/57 , G06F9/30 , H04L9/32
摘要： Various embodiments are generally directed to techniques to enforce policies for computing platform resources, such as to prevent denial of service (DoS) attacks on the computing platform resources. Some embodiments are particularly directed to ISA instructions that allow trusted software/applications to securely enforce policies on a platform resource/device while allowing untrusted software to control allocation of the platform resource. In many embodiments, the ISA instructions may enable secure communication between a trusted application and a platform resource. In several embodiments, a first ISA instruction implemented by microcode may enable a trusted application to wrap policy information for secure transmission through an untrusted stack. In several such embodiments, a second ISA instruction implemented by microcode may enable untrusted software to verify the validity of the wrapped blobs and program registers associated with the platform resource with policy information provided via the wrapped blobs.

3. 发明申请

US20170185766A1 System and method for enabling secure memory transactions using enclaves 审中-公开
公开(公告)号：US20170185766A1
公开(公告)日：2017-06-29
申请号：US14998362
申请日：2015-12-24
申请人： ALPA NARENDRA TRIVEDI , RAVI SAHITA , DAVID DURHAM , KARANVIR GREWAL , PRASHANT DEWAN , SIDDHARTHA CHHABRA
发明人： ALPA NARENDRA TRIVEDI , RAVI SAHITA , DAVID DURHAM , KARANVIR GREWAL , PRASHANT DEWAN , SIDDHARTHA CHHABRA
IPC分类号： G06F21/53 , G06F12/10 , G06F13/28 , G06F21/62
摘要： Various embodiments are generally directed to an apparatus, method, and other techniques to provide direct-memory access, memory-mapped input-output, and/or other memory transactions between devices designated for use by an enclave and the enclave itself. A secure device address map may be configured to map addresses for the enslave device and the enclave, and a register filter component may grant access to the enclave device to the enclave.

4. 发明授权

US09501668B2 Secure video ouput path 有权
标题翻译：安全视频输出路径
公开(公告)号：US09501668B2
公开(公告)日：2016-11-22
申请号：US14036263
申请日：2013-09-25
申请人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , David M. Durham , Balaji Vembu , Xiaozhu Kang , Scott Janus , Jason Martin , Vincent R. Scarlata
发明人： Siddhartha Chhabra , Uday R. Savagaonkar , Prashant Dewan , David M. Durham , Balaji Vembu , Xiaozhu Kang , Scott Janus , Jason Martin , Vincent R. Scarlata
IPC分类号： H04N7/167 , G06F21/82 , G06F21/84 , G06F21/85 , H04N21/41 , H04N21/4143 , H04N21/4367
CPC分类号： G06F21/82 , G06F21/84 , G06F21/85 , H04N21/4122 , H04N21/4143 , H04N21/4367
摘要： Systems and methods for secure delivery of output surface bitmaps to a display engine. An example processing system comprises: an architecturally protected memory; and a processing core communicatively coupled to the architecturally protected memory, the processing core comprising a processing logic configured to implement an architecturally-protected execution environment by performing at least one of: executing instructions residing in the architecturally protected memory and preventing an unauthorized access to the architecturally protected memory; wherein the processing logic is further configured to provide a secure video output path by generating an output surface bitmap encrypted with a first encryption key and storing an encrypted first encryption key in an external memory, wherein the encrypted first encryption key is produced by encrypting the first encryption key with a second encryption key.
摘要翻译：用于将输出表面位图安全传递到显示引擎的系统和方法。一个示例处理系统包括：架构受保护的存储器; 以及处理核心，其通信地耦合到所述体系结构保护的存储器，所述处理核心包括处理逻辑，所述处理逻辑被配置为通过执行以下中的至少一个来实现架构保护的执行环境：执行驻留在所述体系结构保护的存储器中的指令，建筑保护记忆; 其中所述处理逻辑还被配置为通过生成用第一加密密钥加密并将加密的第一加密密钥存储在外部存储器中的输出表面位图来提供安全视频输出路径，其中所述加密的第一加密密钥是通过加密所述第一加密密钥具有第二加密密钥的加密密钥。

5. 发明授权

US09189620B2 Protecting a software component using a transition point wrapper 有权
标题翻译：使用转换点包装器保护软件组件
公开(公告)号：US09189620B2
公开(公告)日：2015-11-17
申请号：US12459359
申请日：2009-06-30
申请人： Prashant Dewan , Vedvyas Shanbhogue
发明人： Prashant Dewan , Vedvyas Shanbhogue
IPC分类号： H04L29/06 , G06F21/53 , G06F12/10
CPC分类号： G06F21/53 , G06F12/1009 , G06F12/1027
摘要： Embodiments of apparatuses, articles, methods, and systems for protecting software components using transition point wrappers are generally described herein. In one embodiment, an apparatus includes a first component, a wrapper component, and a management module. The wrapper component is to transform a transition point between the first component and a second component. The management module is to control access to the first component through the transformed transition point. Other embodiments may be described and claimed.
摘要翻译：这里通常描述使用转换点包装器来保护软件组件的装置，物品，方法和系统的实施例。在一个实施例中，装置包括第一部件，包装部件和管理模块。包装部件是转换第一组件和第二组件之间的转换点。管理模块是通过转换的转换点来控制对第一个组件的访问。可以描述和要求保护其他实施例。

6. 发明申请

US20140123235A1 Allocating Memory Access Control Policies 有权
标题翻译：分配内存访问控制策略
公开(公告)号：US20140123235A1
公开(公告)日：2014-05-01
申请号：US13993421
申请日：2011-12-28
申请人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
发明人： Prashant Dewan , Jason Martin , Uday R. Savagaonkar , Carlos V. Rozas
IPC分类号： G06F21/62
CPC分类号： G06F21/62 , G06F21/53
摘要： Enabling access control caches for co-processors to be charged using a VMX-nonroot instruction. As a result a transition to VMX-root is not needed, saving the cycles involved in such a transition.
摘要翻译：使用VMX-nonroot指令为协处理器启用访问控制高速缓存。因此，不需要转换到VMX-root，从而节省了这种转换所涉及的周期。

7. 发明申请

US20140096068A1 DEVICE AND METHOD FOR SECURE USER INTERFACE GESTURE PROCESSING USING PROCESSOR GRAPHICS 有权
标题翻译：使用处理器图形确保用户界面姿态处理的设备和方法
公开(公告)号：US20140096068A1
公开(公告)日：2014-04-03
申请号：US13631288
申请日：2012-09-28
申请人： Prashant Dewan , Siddhartha Chhabra , Xiaozhu Kang , Xiaoning Li , Uday R. Savagaonkar , David M. Durham , Paul S. Schmitz , Michael A. Goldsmith , Jason Martin
发明人： Prashant Dewan , Siddhartha Chhabra , Xiaozhu Kang , Xiaoning Li , Uday R. Savagaonkar , David M. Durham , Paul S. Schmitz , Michael A. Goldsmith , Jason Martin
IPC分类号： G06F3/0481 , G06F3/041
CPC分类号： G06F3/0481 , G06F3/041 , G06F3/04883 , G06F21/74 , G06F21/82
摘要： A device and method for securely rendering content on a gesture-enabled computing device includes initializing a secure execution environment on a processor graphics of the computing device. The computing device transfers view rendering code and associated state data to the secure execution environment. An initial view of the content is rendered by executing the view rendering code in the secure execution environment. A gesture is recognized, and an updated view of the content is rendered in the secure execution environment in response to the gesture. The gesture may include a touch gesture recognized on a touch screen, or a physical gesture of the user recognized by a camera. After the updated view of the content is rendered, the main processor of the computing device may receive updated view data from the secure execution environment.
摘要翻译：用于在启用姿势的计算设备上安全地呈现内容的设备和方法包括在计算设备的处理器图形上初始化安全执行环境。计算设备将视图呈现代码和相关联的状态数据传送到安全执行环境。通过在安全执行环境中执行视图呈现代码来呈现内容的初始视图。识别手势，并且响应于手势在安全执行环境中呈现内容的更新视图。手势可以包括在触摸屏上识别的触摸手势，或者由相机识别的用户的身体手势。在呈现内容的更新视图之后，计算设备的主处理器可以从安全执行环境接收更新的视图数据。

8. 发明申请

US20140095870A1 DEVICE, METHOD, AND SYSTEM FOR CONTROLLING ACCESS TO WEB OBJECTS OF A WEBPAGE OR WEB-BROWSER APPLICATION 审中-公开
标题翻译：用于控制访问网页或网络浏览器应用程序的WEB对象的设备，方法和系统
公开(公告)号：US20140095870A1
公开(公告)日：2014-04-03
申请号：US13631419
申请日：2012-09-28
申请人： Prashant Dewan , David M. Durham
发明人： Prashant Dewan , David M. Durham
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： H04L9/3231 , G06F21/32 , H04L9/0866 , H04L63/0428 , H04L63/0861 , H04L67/02 , H04L67/42
摘要： A method and device for securely displaying web content with secure web objects across untrusted channels includes downloading web content from a web server. The web content includes tags that a web browser uses to authenticate the current user and identify encrypted web objects packaged in the web content. The computing device authenticates the current user using a biometric recognition procedure. If the current user is authenticated and determined to be authorized to view the decrypted web object, the encrypted web object is decrypted and displayed to the user. If the user is unauthenticated, the encrypted web object is displayed in place of the encrypted web object such that the decrypted web object is displayed for only authorized persons physically present at the computing device. The biometric recognition procedure and web object decryption processes are protected through secure media path circuitry and secure memory.
摘要翻译：用于在不受信任的频道上安全地显示具有安全web对象的web内容的方法和装置包括从Web服务器下载web内容。网页内容包括网页浏览器用来验证当前用户并识别打包在网页内容中的加密网页对象的标签。计算设备使用生物识别程序认证当前用户。如果当前用户被认证并被确定为被授权以查看解密的web对象，则加密的web对象被解密并显示给用户。如果用户未经身份验证，则加密的web对象被显示代替加密的web对象，使得被解密的web对象被显示给仅在物理存在于计算设备处的授权人员。生物识别程序和web对象解密过程通过安全媒体路径电路和安全存储器进行保护。

9. 发明授权

US08572692B2 Method and system for a platform-based trust verifying service for multi-party verification 有权
公开(公告)号：US08572692B2
公开(公告)日：2013-10-29
申请号：US12215907
申请日：2008-06-30
申请人： Divya Naidu Kolar Sunder , Hormuzd Khosravi , David Durham , Dan Dahle , Prashant Dewan
发明人： Divya Naidu Kolar Sunder , Hormuzd Khosravi , David Durham , Dan Dahle , Prashant Dewan
IPC分类号： G06F7/04 , H04L9/32
CPC分类号： H04L63/126 , G06F21/31 , G06F21/57 , G06F21/577 , G06F2221/2129 , H04L63/0823 , H04L63/123
摘要： A method and system for a platform-based trust verifying service for multi-party verification. In one embodiment, the method includes a client platform accessing an service provider over a network. Upon accessing the service provider, the client platform receives a request from the service provider for platform measurement and verification. The client platform collects platform information and performs measurement and verification, including performing an integrity manifest comparison. If the integrity manifest comparison indicates a good client platform posture, then the client platform signs the client platform posture and sends an approval notification to the service provider indicating that the client platform has not been compromised. The client platform may then receive the service of the service provider. If the integrity manifest comparison indicates that the client platform posture is not good, then the client platform will send a failure notification to the service provider indicating that the client platform has been compromised.

10. 发明授权

US08532303B2 Symmetric key distribution framework for the internet 有权
标题翻译：互联网的对称密钥分发框架
公开(公告)号：US08532303B2
公开(公告)日：2013-09-10
申请号：US11957184
申请日：2007-12-14
申请人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
发明人： Divya Naidu Kolar Sunder , Prashant Dewan , Men Long
IPC分类号： H04L9/08
CPC分类号： H04L63/0435 , H04L9/083 , H04L63/0428 , H04L63/062 , H04L63/20
摘要： A method, device, and system are disclosed. In one embodiment the method includes receiving measured health information from a client on a key distribution server. Once the measured health information is received the server is capable of validating the measured health information to see if it is authentic. The server is also capable of sending a session key to the client when the measured health information is validated. When the client receives the session key, the client is capable of initiating an encrypted and authenticated connection with an application server in the domain using the session key.
摘要翻译：公开了一种方法，装置和系统。在一个实施例中，该方法包括从密钥分发服务器上的客户端接收测量的健康信息。一旦接收到测量的健康信息，服务器就能够验证测量的健康信息，看它是否可信。当测量的健康信息被验证时，服务器还能够向客户端发送会话密钥。当客户端接收会话密钥时，客户端能够使用会话密钥发起与域中的应用服务器的加密和认证连接。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式